Faltara

    Privacy Policy

    Last updated: 2026-02-12

    Faltara ("we", "us", "our") operates the faltara.com website and the Faltara recruitment platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in compliance with the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL) issued by Royal Decree No. M/19 dated 9/2/1443H and its implementing regulations.

    1. Data Controller

    Faltara is the data controller responsible for your personal data. For any inquiries regarding this policy, contact us at: privacy@faltara.com

    2. Personal Data We Collect

    We may collect the following categories of personal data:

    • Identity Data: Full name, national ID or Iqama number (when required), job title, professional qualifications.
    • Contact Data: Email address, phone number, city, country.
    • Professional Data: CV/resume, work experience, skills, education, certifications, recommendations.
    • Account Data: Username, password (encrypted), account preferences.
    • Usage Data: IP address, browser type, pages visited, time spent, referring URLs.
    • Transaction Data: Payment details (processed via secure third-party providers), reward history.

    3. Legal Basis for Processing

    Under PDPL, we process your personal data based on:

    • Consent: You provide explicit consent when creating an account or submitting information.
    • Contractual Necessity: Processing is necessary to fulfill our services (matching candidates with companies).
    • Legitimate Interest: Improving our platform, preventing fraud, and ensuring security.
    • Legal Obligation: Compliance with Saudi labor laws, Nitaqat regulations, and other applicable regulations.

    4. How We Use Your Data

    • Facilitate recruitment matching between companies, recommenders, and job seekers.
    • Process recommendations and reward payments in Saudi Riyals (SAR).
    • Communicate with you about your account, applications, and platform updates.
    • Improve and personalize your experience on the platform.
    • Comply with legal and regulatory requirements in the Kingdom of Saudi Arabia.
    • Prevent fraud and maintain platform security.

    5. Data Sharing and Disclosure

    We may share your personal data with:

    • Employers: When you are recommended for or apply to a job opening.
    • Recommenders: Limited information necessary for the recommendation process.
    • Service Providers: Trusted third-party providers (hosting, payment processing, analytics) bound by data protection agreements.
    • Legal Authorities: When required by Saudi law or court order.

    We do not sell your personal data to third parties.

    6. Cross-Border Data Transfer

    In accordance with PDPL Article 29, if your data needs to be transferred outside the Kingdom of Saudi Arabia, we ensure the receiving country provides adequate data protection or we implement appropriate safeguards such as standard contractual clauses approved by the Saudi Data & AI Authority (SDAIA).

    7. Data Retention

    We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by Saudi law. Inactive accounts are automatically flagged for review after 24 months. You may request deletion at any time.

    8. Your Rights Under PDPL

    As a data subject, you have the right to:

    • Access: Request a copy of your personal data.
    • Correction: Request correction of inaccurate or incomplete data.
    • Deletion: Request deletion of your data (subject to legal obligations).
    • Withdrawal of Consent: Withdraw consent at any time without affecting prior processing.
    • Data Portability: Receive your data in a structured, machine-readable format.
    • Object: Object to processing based on legitimate interest.
    • Complaint: File a complaint with SDAIA if you believe your rights have been violated.

    To exercise your rights, contact: privacy@faltara.com

    9. Data Security

    We implement industry-standard technical and organizational measures including encryption (TLS/SSL), access controls, regular security audits, and secure data storage to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

    10. Cookies and Tracking

    We use essential cookies to ensure the platform functions correctly and analytics cookies to understand usage patterns. You can manage cookie preferences through your browser settings. For detailed information, see our cookie preferences on the platform.

    11. Children's Privacy

    Our platform is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If we discover such data has been collected, we will delete it promptly.

    12. Changes to This Policy

    We may update this policy periodically. Changes will be posted on this page with a new "Last updated" date. Continued use of the platform after changes constitutes acceptance of the updated policy.

    13. Contact Us

    For any questions about this Privacy Policy or your personal data, contact our Data Protection Officer at: